Hector Martin

@marcan42 @xoreipeip @grsecurity ...reducing because you don't trust the code any more or because you're mad at the guy behind the code?

@marcan42 @xoreipeip @grsecurity If the former you better take a second look. If the latter, just get over it. The code is worth it!

@_minipli @xoreipeip @grsecurity Neither. Reducing because it doesn't meet the stability requirements I have (and grsec themselves agree!)

@marcan42 @xoreipeip @grsecurity Fair enough... if stability is more important than security. Others may choose differently.

@_minipli @xoreipeip @grsecurity Not others. I didn't say I was getting rid of grsecurity across the board, not by a long shot.

@_minipli @xoreipeip @grsecurity But yes, in one environment that I administer, I've concluded that it's really not worth it, objectively.

@_minipli @xoreipeip @grsecurity Basically limited-time, hands-on, high load, 4000 people hate me if it goes down for a minute.

@_minipli @xoreipeip @grsecurity And the fallout of a hypothetical breach would be relatively minute (no real sensitive data).